@agentvalet/register 0.4.4 → 0.4.6

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command } from "commander";
-import chalk7 from "chalk";
+import { Command as Command4 } from "commander";
+import chalk11 from "chalk";
 
 // src/wizard.ts
 import prompts from "prompts";
@@ -166,7 +166,7 @@ function parseEvent(data) {
   return null;
 }
 function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/save.ts
@@ -191,9 +191,9 @@ async function saveOutput(opts) {
 }
 
 // src/commands/refresh.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync, statSync } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync3, mkdirSync, statSync } from "fs";
 import { createSign, createPrivateKey } from "crypto";
-import { dirname as dirname2, resolve as resolve2, join } from "path";
+import { dirname as dirname2, resolve as resolve3 } from "path";
 
 // src/lib/skill-writer.ts
 import { existsSync, writeFileSync } from "fs";
@@ -410,6 +410,10 @@ To refresh this file: \`npx @agentvalet/register refresh\`
 `;
 }
 
+// src/lib/require-agent.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { resolve as resolve2, join } from "path";
+
 // src/config/store.ts
 import Conf from "conf";
 var store = new Conf({
@@ -428,24 +432,11 @@ function isAuthenticated() {
   return !!store.get("apiKey");
 }
 
-// src/commands/refresh.ts
-var CLAUDE_START = "<!-- agentvalet:start -->";
-var CLAUDE_END = "<!-- agentvalet:end -->";
-var HOOK_COMMAND = "npx @agentvalet/register refresh --if-stale --quiet 2>/dev/null || true";
-var HOOK_MARKER = "agentvalet/register refresh";
-function base64url(input) {
-  return Buffer.from(input).toString("base64url");
-}
-function signJwt(agentId, ownerId, privateKeyPem) {
-  const now = Math.floor(Date.now() / 1e3);
-  const header = base64url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
-  const payload = base64url(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
-  const signingInput = `${header}.${payload}`;
-  const sign = createSign("RSA-SHA256");
-  sign.update(signingInput);
-  const signature = sign.sign(createPrivateKey(privateKeyPem), "base64url");
-  return `${signingInput}.${signature}`;
-}
+// src/lib/require-agent.ts
+import chalk3 from "chalk";
+var NO_AGENT_MSG = chalk3.red("\n  \u2717 No agent registered.\n") + chalk3.dim(
+  "  Run the following command first to register an agent in this directory:\n\n    npx @agentvalet/register\n"
+);
 function parseEnvFile(content) {
   const result = {};
   for (const line of content.split("\n")) {
@@ -457,42 +448,68 @@ function parseEnvFile(content) {
   }
   return result;
 }
-function writePermissionsFromEvent(agentId, ownerId, platforms, outputPath = "./.claude/agentvalet-permissions.md") {
-  const content = generatePermissionsFile(agentId, ownerId, platforms);
-  const resolvedPath = resolve2(outputPath);
-  mkdirSync(dirname2(resolvedPath), { recursive: true });
-  writeFileSync2(resolvedPath, content, "utf-8");
-  embedInClaudeMd(content);
-  ensureHook();
-}
-async function runRefresh(options) {
-  const outputPath = resolve2(options.outputPath);
-  if (options.ifStale) {
+function resolveAgent(envFile = ".env.agentvalet") {
+  let agentId;
+  let ownerId;
+  let apiUrl = "https://api.agentvalet.ai";
+  let keyPath;
+  const envPath = resolve2(envFile);
+  if (existsSync2(envPath)) {
     try {
-      const stat = statSync(outputPath);
-      const fileIsFresh = Date.now() - stat.mtimeMs < 36e5;
-      const claudeMdPath = resolve2("CLAUDE.md");
-      const claudeMd = existsSync2(claudeMdPath) ? readFileSync2(claudeMdPath, "utf-8") : "";
-      const blockStart = claudeMd.indexOf(CLAUDE_START);
-      const blockEnd = claudeMd.indexOf(CLAUDE_END);
-      const blockContent = blockStart !== -1 && blockEnd !== -1 ? claudeMd.slice(blockStart, blockEnd) : "";
-      const blockHasPlatforms = blockContent.includes("### ");
-      if (fileIsFresh && blockHasPlatforms) return;
+      const vars = parseEnvFile(readFileSync2(envPath, "utf-8"));
+      agentId = vars["AGENTVALET_AGENT_ID"];
+      ownerId = vars["AGENTVALET_OWNER_ID"];
+      apiUrl = vars["AGENTVALET_API_URL"] ?? apiUrl;
+      keyPath = vars["AGENTVALET_PRIVATE_KEY_PATH"];
+    } catch {
+    }
+  }
+  if (!agentId || !ownerId || !keyPath) {
+    const localConfigPath = join(process.cwd(), ".agentvalet", "config.json");
+    if (existsSync2(localConfigPath)) {
+      try {
+        const local = JSON.parse(readFileSync2(localConfigPath, "utf-8"));
+        agentId = agentId ?? local["agent_id"];
+        apiUrl = local["proxy_url"] ?? apiUrl;
+        keyPath = keyPath ?? join(process.cwd(), ".agentvalet", "agent.key");
+      } catch {
+      }
+    }
+    try {
+      const global = getStoredConfig();
+      if (!ownerId) ownerId = global.ownerId ?? void 0;
+    } catch {
+    }
+  }
+  if (!agentId || !ownerId || !keyPath) {
+    try {
+      const global = getStoredConfig();
+      agentId = agentId ?? global.lastAgentId ?? void 0;
+      ownerId = ownerId ?? global.ownerId ?? void 0;
+      keyPath = keyPath ?? global.lastKeyPath ?? void 0;
+      apiUrl = global.proxyUrl ?? apiUrl;
     } catch {
     }
   }
+  if (!agentId || !ownerId || !keyPath) {
+    process.stderr.write(NO_AGENT_MSG + "\n");
+    process.exit(1);
+  }
+  return { agentId, ownerId, keyPath, apiUrl };
+}
+function tryResolveAgent(envFile = ".env.agentvalet") {
   let agentId;
   let ownerId;
   let apiUrl = "https://api.agentvalet.ai";
   let keyPath;
-  const envPath = resolve2(options.envFile);
+  const envPath = resolve2(envFile);
   if (existsSync2(envPath)) {
     try {
-      const envVars = parseEnvFile(readFileSync2(envPath, "utf-8"));
-      agentId = envVars["AGENTVALET_AGENT_ID"];
-      ownerId = envVars["AGENTVALET_OWNER_ID"];
-      apiUrl = envVars["AGENTVALET_API_URL"] ?? apiUrl;
-      keyPath = envVars["AGENTVALET_PRIVATE_KEY_PATH"];
+      const vars = parseEnvFile(readFileSync2(envPath, "utf-8"));
+      agentId = vars["AGENTVALET_AGENT_ID"];
+      ownerId = vars["AGENTVALET_OWNER_ID"];
+      apiUrl = vars["AGENTVALET_API_URL"] ?? apiUrl;
+      keyPath = vars["AGENTVALET_PRIVATE_KEY_PATH"];
     } catch {
     }
   }
@@ -507,32 +524,72 @@ async function runRefresh(options) {
       } catch {
       }
     }
-    if (!ownerId) {
-      try {
-        ownerId = getStoredConfig().ownerId ?? void 0;
-      } catch {
-      }
+    try {
+      const global = getStoredConfig();
+      if (!ownerId) ownerId = global.ownerId ?? void 0;
+    } catch {
     }
   }
   if (!agentId || !ownerId || !keyPath) {
     try {
       const global = getStoredConfig();
-      if (!agentId && global.lastAgentId) agentId = global.lastAgentId;
-      if (!ownerId && global.ownerId) ownerId = global.ownerId;
-      if (!keyPath && global.lastKeyPath) keyPath = global.lastKeyPath;
-      if (!apiUrl && global.proxyUrl) apiUrl = global.proxyUrl;
+      agentId = agentId ?? global.lastAgentId ?? void 0;
+      ownerId = ownerId ?? global.ownerId ?? void 0;
+      keyPath = keyPath ?? global.lastKeyPath ?? void 0;
+      apiUrl = global.proxyUrl ?? apiUrl;
     } catch {
     }
   }
-  if (!agentId || !ownerId || !keyPath) {
-    throw new Error(
-      `Cannot find agent credentials.
-Run 'npx @agentvalet/register' in this directory first.`
-    );
+  if (!agentId || !ownerId || !keyPath) return null;
+  return { agentId, ownerId, keyPath, apiUrl };
+}
+
+// src/commands/refresh.ts
+var CLAUDE_START = "<!-- agentvalet:start -->";
+var CLAUDE_END = "<!-- agentvalet:end -->";
+var HOOK_COMMAND = "npx @agentvalet/register refresh --if-stale --quiet 2>/dev/null || true";
+var HOOK_MARKER = "agentvalet/register refresh";
+function base64url(input) {
+  return Buffer.from(input).toString("base64url");
+}
+function signJwt(agentId, ownerId, privateKeyPem) {
+  const now = Math.floor(Date.now() / 1e3);
+  const header = base64url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+  const payload = base64url(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
+  const signingInput = `${header}.${payload}`;
+  const sign = createSign("RSA-SHA256");
+  sign.update(signingInput);
+  const signature = sign.sign(createPrivateKey(privateKeyPem), "base64url");
+  return `${signingInput}.${signature}`;
+}
+function writePermissionsFromEvent(agentId, ownerId, platforms, outputPath = "./.claude/agentvalet-permissions.md") {
+  const content = generatePermissionsFile(agentId, ownerId, platforms);
+  const resolvedPath = resolve3(outputPath);
+  mkdirSync(dirname2(resolvedPath), { recursive: true });
+  writeFileSync2(resolvedPath, content, "utf-8");
+  embedInClaudeMd(content);
+  ensureHook();
+}
+async function runRefresh(options) {
+  const outputPath = resolve3(options.outputPath);
+  if (options.ifStale) {
+    try {
+      const stat = statSync(outputPath);
+      const fileIsFresh = Date.now() - stat.mtimeMs < 36e5;
+      const claudeMdPath = resolve3("CLAUDE.md");
+      const claudeMd = existsSync3(claudeMdPath) ? readFileSync3(claudeMdPath, "utf-8") : "";
+      const blockStart = claudeMd.indexOf(CLAUDE_START);
+      const blockEnd = claudeMd.indexOf(CLAUDE_END);
+      const blockContent = blockStart !== -1 && blockEnd !== -1 ? claudeMd.slice(blockStart, blockEnd) : "";
+      const blockHasPlatforms = blockContent.includes("### ");
+      if (fileIsFresh && blockHasPlatforms) return;
+    } catch {
+    }
   }
+  const { agentId, ownerId, keyPath, apiUrl } = resolveAgent(options.envFile);
   let privateKeyPem;
   try {
-    privateKeyPem = readFileSync2(keyPath, "utf-8");
+    privateKeyPem = readFileSync3(keyPath, "utf-8");
   } catch {
     throw new Error(`Cannot read private key: ${keyPath}`);
   }
@@ -559,18 +616,18 @@ Run 'npx @agentvalet/register' in this directory first.`
   }
 }
 function embedInClaudeMd(permissionsContent) {
-  const claudeMdPath = resolve2("CLAUDE.md");
+  const claudeMdPath = resolve3("CLAUDE.md");
   const block = `${CLAUDE_START}
 ${permissionsContent.trimEnd()}
 ${CLAUDE_END}`;
-  if (!existsSync2(claudeMdPath)) {
+  if (!existsSync3(claudeMdPath)) {
     writeFileSync2(claudeMdPath, `# Agent Instructions
 
 ${block}
 `, "utf-8");
     return;
   }
-  const existing = readFileSync2(claudeMdPath, "utf-8");
+  const existing = readFileSync3(claudeMdPath, "utf-8");
   if (existing.includes(CLAUDE_START)) {
     const replaced = existing.replace(
       new RegExp(`${CLAUDE_START}[\\s\\S]*?${CLAUDE_END}`, "m"),
@@ -586,11 +643,11 @@ ${block}
   }
 }
 function ensureHook() {
-  const settingsPath = resolve2(".claude/settings.local.json");
+  const settingsPath = resolve3(".claude/settings.local.json");
   let settings = {};
-  if (existsSync2(settingsPath)) {
+  if (existsSync3(settingsPath)) {
     try {
-      settings = JSON.parse(readFileSync2(settingsPath, "utf-8"));
+      settings = JSON.parse(readFileSync3(settingsPath, "utf-8"));
     } catch {
       return;
     }
@@ -617,51 +674,20 @@ function ensureHook() {
   ensureMcpJson();
 }
 function ensureMcpJson() {
-  const mcpJsonPath = resolve2(".mcp.json");
+  const mcpJsonPath = resolve3(".mcp.json");
   let mcpConfig = {};
-  if (existsSync2(mcpJsonPath)) {
+  if (existsSync3(mcpJsonPath)) {
     try {
-      mcpConfig = JSON.parse(readFileSync2(mcpJsonPath, "utf-8"));
+      mcpConfig = JSON.parse(readFileSync3(mcpJsonPath, "utf-8"));
     } catch {
       return;
     }
   }
   const servers = mcpConfig.mcpServers ?? {};
   if (servers["agentvalet"]) return;
-  let agentId;
-  let ownerId;
-  let apiUrl = "https://api.agentvalet.ai";
-  let keyPath;
-  const envPath = resolve2(".env.agentvalet");
-  if (existsSync2(envPath)) {
-    try {
-      const envVars = parseEnvFile(readFileSync2(envPath, "utf-8"));
-      agentId = envVars["AGENTVALET_AGENT_ID"];
-      ownerId = envVars["AGENTVALET_OWNER_ID"];
-      apiUrl = envVars["AGENTVALET_API_URL"] ?? apiUrl;
-      keyPath = envVars["AGENTVALET_PRIVATE_KEY_PATH"];
-    } catch {
-    }
-  }
-  if (!agentId || !keyPath) {
-    const localConfigPath = join(process.cwd(), ".agentvalet", "config.json");
-    if (existsSync2(localConfigPath)) {
-      try {
-        const local = JSON.parse(readFileSync2(localConfigPath, "utf-8"));
-        agentId = agentId ?? local["agent_id"];
-        apiUrl = local["proxy_url"] ?? apiUrl;
-        keyPath = keyPath ?? join(process.cwd(), ".agentvalet", "agent.key");
-      } catch {
-      }
-    }
-    if (!ownerId) {
-      try {
-        ownerId = getStoredConfig().ownerId ?? void 0;
-      } catch {
-      }
-    }
-  }
-  if (!agentId || !ownerId || !keyPath) return;
+  const creds = tryResolveAgent();
+  if (!creds) return;
+  const { agentId, ownerId, apiUrl, keyPath } = creds;
   servers["agentvalet"] = {
     command: "npx",
     args: ["-y", "@agentvalet/register", "mcp-server"],
@@ -677,14 +703,14 @@ function ensureMcpJson() {
 }
 
 // src/commands/onboard.ts
-import chalk6 from "chalk";
+import chalk7 from "chalk";
 import ora from "ora";
 import prompts3 from "prompts";
 
 // src/auth/github-device-flow.ts
 import { createOAuthDeviceAuth } from "@octokit/auth-oauth-device";
 import open from "open";
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 var GITHUB_CLIENT_ID = process.env.AGENTVALET_GITHUB_CLIENT_ID ?? "Ov23liQcaW0HcqJxmLfF";
 async function authenticateWithGitHub() {
   const auth = createOAuthDeviceAuth({
@@ -693,15 +719,15 @@ async function authenticateWithGitHub() {
     scopes: ["user:email", "read:user"],
     onVerification(verification) {
       console.log("");
-      console.log(chalk3.bold("  Authenticate with GitHub"));
+      console.log(chalk4.bold("  Authenticate with GitHub"));
       console.log("");
-      console.log(`  1. Open: ${chalk3.cyan.underline(verification.verification_uri)}`);
-      console.log(`  2. Enter code: ${chalk3.bold.yellow(verification.user_code)}`);
+      console.log(`  1. Open: ${chalk4.cyan.underline(verification.verification_uri)}`);
+      console.log(`  2. Enter code: ${chalk4.bold.yellow(verification.user_code)}`);
       console.log("");
       open(verification.verification_uri).catch(() => {
-        console.log(chalk3.dim("  (Could not open browser \u2014 navigate to the URL above manually)"));
+        console.log(chalk4.dim("  (Could not open browser \u2014 navigate to the URL above manually)"));
       });
-      console.log(chalk3.dim("  Waiting for authorisation..."));
+      console.log(chalk4.dim("  Waiting for authorisation..."));
     }
   });
   const tokenAuth = await auth({ type: "oauth" });
@@ -853,20 +879,20 @@ async function writeLocalConfig(config) {
 }
 
 // src/output/env.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import { appendFile as appendFile2, writeFile as writeFile3 } from "fs/promises";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import path3 from "path";
 function formatEnvBlock(vars) {
   return Object.entries(vars).map(([key, value]) => {
     const truncated = value.length > 60 ? value.substring(0, 40) + "..." + value.substring(value.length - 10) : value;
-    return `  ${chalk4.dim(key + "=")}${chalk4.white(truncated)}`;
+    return `  ${chalk5.dim(key + "=")}${chalk5.white(truncated)}`;
   }).join("\n");
 }
 
 // src/config/ide.ts
 import { mkdir as mkdir3, writeFile as writeFile4, readFile as readFile2, appendFile as appendFile3 } from "fs/promises";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import path4 from "path";
 import os from "os";
 function buildMcpEntry(params) {
@@ -883,7 +909,7 @@ function buildMcpEntry(params) {
 }
 async function mergeJsonFile(filePath, key, value) {
   let existing = {};
-  if (existsSync4(filePath)) {
+  if (existsSync5(filePath)) {
     try {
       const text = await readFile2(filePath, "utf8");
       existing = JSON.parse(text);
@@ -941,9 +967,9 @@ async function writeGlobalFrameworkConfigs(params) {
   const written = [];
   const codexDir = path4.join(os.homedir(), ".codex");
   const codexConfigPath = path4.join(codexDir, "config.toml");
-  if (existsSync4(codexDir)) {
+  if (existsSync5(codexDir)) {
     try {
-      const existing = existsSync4(codexConfigPath) ? await readFile2(codexConfigPath, "utf8") : "";
+      const existing = existsSync5(codexConfigPath) ? await readFile2(codexConfigPath, "utf8") : "";
       if (!existing.includes("[mcp_servers.agentvalet]")) {
         const addition = `
 [mcp_servers.agentvalet]
@@ -974,7 +1000,7 @@ async function writeIdeConfigs(params) {
       console.warn(`  Warning: could not write .mcp.json: ${err.message}`);
     }
     const claudeMdPath = path4.join(cwd, "CLAUDE.md");
-    if (!existsSync4(claudeMdPath)) {
+    if (!existsSync5(claudeMdPath)) {
       try {
         await writeFile4(claudeMdPath, buildClaudeMd(params.agentId, params.ownerId, params.proxyUrl), "utf8");
         written.push("CLAUDE.md");
@@ -1000,12 +1026,12 @@ async function writeIdeConfigs(params) {
 }
 
 // src/config/frameworks.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { execSync as execSync2 } from "child_process";
 import os2 from "os";
 import path5 from "path";
 import prompts2 from "prompts";
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 function tryBinary(cmd) {
   try {
     execSync2(`${cmd} --version`, { stdio: "ignore", timeout: 3e3 });
@@ -1020,20 +1046,20 @@ function cursorInstalled() {
   if (platform === "win32") {
     const appData = process.env.APPDATA ?? path5.join(home, "AppData", "Roaming");
     const localAppData = process.env.LOCALAPPDATA ?? path5.join(home, "AppData", "Local");
-    return existsSync5(path5.join(appData, "Cursor")) || existsSync5(path5.join(localAppData, "Programs", "cursor"));
+    return existsSync6(path5.join(appData, "Cursor")) || existsSync6(path5.join(localAppData, "Programs", "cursor"));
   }
   if (platform === "darwin") {
-    return existsSync5(path5.join(home, "Library", "Application Support", "Cursor")) || existsSync5("/Applications/Cursor.app");
+    return existsSync6(path5.join(home, "Library", "Application Support", "Cursor")) || existsSync6("/Applications/Cursor.app");
   }
-  return existsSync5(path5.join(home, ".config", "Cursor")) || existsSync5("/usr/share/applications/cursor.desktop");
+  return existsSync6(path5.join(home, ".config", "Cursor")) || existsSync6("/usr/share/applications/cursor.desktop");
 }
 function detectFrameworks() {
   const home = os2.homedir();
   return {
-    codex: existsSync5(path5.join(home, ".codex")) || tryBinary("codex"),
-    claudeCode: existsSync5(path5.join(home, ".claude")) || tryBinary("claude"),
-    cursor: existsSync5(path5.join(process.cwd(), ".cursor")) || cursorInstalled(),
-    openclaw: existsSync5(path5.join(home, ".openclaw"))
+    codex: existsSync6(path5.join(home, ".codex")) || tryBinary("codex"),
+    claudeCode: existsSync6(path5.join(home, ".claude")) || tryBinary("claude"),
+    cursor: existsSync6(path5.join(process.cwd(), ".cursor")) || cursorInstalled(),
+    openclaw: existsSync6(path5.join(home, ".openclaw"))
   };
 }
 async function frameworkSetupConsent(detected) {
@@ -1054,9 +1080,9 @@ async function frameworkSetupConsent(detected) {
   }
   if (items.length === 0) return false;
   console.log("");
-  console.log(chalk5.bold("  Detected agent frameworks"));
+  console.log(chalk6.bold("  Detected agent frameworks"));
   for (const item of items) {
-    console.log(chalk5.dim(`    ${item}`));
+    console.log(chalk6.dim(`    ${item}`));
   }
   console.log("");
   const { confirm } = await prompts2({
@@ -1074,13 +1100,13 @@ import path6 from "path";
 import { writeFile as writeFile5 } from "fs/promises";
 async function runOnboard() {
   console.log("");
-  console.log(chalk6.bold("  AgentValet \u2014 Agent Registration"));
-  console.log(chalk6.dim("  app.agentvalet.ai"));
+  console.log(chalk7.bold("  AgentValet \u2014 Agent Registration"));
+  console.log(chalk7.dim("  app.agentvalet.ai"));
   console.log("");
   if (isAuthenticated()) {
     const stored = getStoredConfig();
     console.log(
-      chalk6.green("  \u2713 Already authenticated as") + chalk6.bold(` ${stored.email}`)
+      chalk7.green("  \u2713 Already authenticated as") + chalk7.bold(` ${stored.email}`)
     );
     const { action } = await prompts3({
       type: "select",
@@ -1101,7 +1127,7 @@ async function runOnboard() {
     }
     if (action === "signout") {
       clearConfig();
-      console.log(chalk6.dim("  Signed out. Run again to re-authenticate."));
+      console.log(chalk7.dim("  Signed out. Run again to re-authenticate."));
       return;
     }
     await registerAgentFlow(stored.cliToken, stored.ownerId);
@@ -1130,14 +1156,14 @@ async function runOnboard() {
     const result = await authenticateWithGitHub();
     githubToken = result.token;
   } catch (err) {
-    console.error(chalk6.red(`  \u2717 Authentication failed: ${err.message}`));
+    console.error(chalk7.red(`  \u2717 Authentication failed: ${err.message}`));
     process.exit(1);
   }
   spinner = ora("  Fetching your GitHub profile...").start();
   let githubUser;
   try {
     githubUser = await getGitHubUser(githubToken);
-    spinner.succeed(`  GitHub: ${chalk6.bold("@" + githubUser.login)}`);
+    spinner.succeed(`  GitHub: ${chalk7.bold("@" + githubUser.login)}`);
   } catch (err) {
     spinner.fail(`  Failed to fetch GitHub profile: ${err.message}`);
     process.exit(1);
@@ -1186,7 +1212,7 @@ async function runOnboard() {
 }
 async function ownerIdFlow() {
   console.log("");
-  console.log(chalk6.dim("  Find your Owner ID at: ") + chalk6.cyan.underline("https://app.agentvalet.ai/settings"));
+  console.log(chalk7.dim("  Find your Owner ID at: ") + chalk7.cyan.underline("https://app.agentvalet.ai/settings"));
   console.log("");
   const { ownerId } = await prompts3({
     type: "text",
@@ -1201,10 +1227,10 @@ async function ownerIdFlow() {
   let account;
   try {
     account = await getAccount(ownerId.trim());
-    spinner.succeed(`  Account verified \u2014 plan: ${chalk6.bold(account.plan)}`);
+    spinner.succeed(`  Account verified \u2014 plan: ${chalk7.bold(account.plan)}`);
   } catch (err) {
     spinner.fail(`  Could not verify Owner ID: ${err.message}`);
-    console.log(chalk6.dim("  Make sure you copied the full Owner ID from app.agentvalet.ai/settings"));
+    console.log(chalk7.dim("  Make sure you copied the full Owner ID from app.agentvalet.ai/settings"));
     process.exit(1);
   }
   saveConfig({
@@ -1238,7 +1264,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       name: agentName.trim(),
       source: "cli"
     }, apiKey);
-    spinner.succeed(`  Agent registered: ${chalk6.bold(agent.agent_id)}`);
+    spinner.succeed(`  Agent registered: ${chalk7.bold(agent.agent_id)}`);
   } catch (err) {
     spinner.fail(`  Registration failed: ${err.message}`);
     process.exit(1);
@@ -1254,8 +1280,8 @@ async function registerAgentFlow(apiKey, ownerId) {
     });
     saveConfig({ lastAgentId: agent.agent_id, lastKeyPath: keyPath });
   } catch (err) {
-    console.error(chalk6.red(`  \u2717 Failed to write local config: ${err.message}`));
-    console.log(chalk6.dim("  Agent was registered \u2014 run again to save config locally."));
+    console.error(chalk7.red(`  \u2717 Failed to write local config: ${err.message}`));
+    console.log(chalk7.dim("  Agent was registered \u2014 run again to save config locally."));
     process.exit(1);
   }
   try {
@@ -1273,7 +1299,7 @@ async function registerAgentFlow(apiKey, ownerId) {
   const shouldSetup = await frameworkSetupConsent(detected);
   if (shouldSetup) {
     console.log("");
-    console.log(chalk6.bold("  Configuring agent frameworks..."));
+    console.log(chalk7.bold("  Configuring agent frameworks..."));
     console.log("");
     const ideResults = await writeIdeConfigs({
       agentId: agent.agent_id,
@@ -1283,7 +1309,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       detected
     });
     for (const r of ideResults) {
-      console.log(chalk6.green(`  \u2713 ${r}`));
+      console.log(chalk7.green(`  \u2713 ${r}`));
     }
     const globalResults = await writeGlobalFrameworkConfigs({
       agentId: agent.agent_id,
@@ -1292,7 +1318,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       keyPath
     });
     for (const r of globalResults) {
-      console.log(chalk6.green(`  \u2713 ${r}`));
+      console.log(chalk7.green(`  \u2713 ${r}`));
     }
     if (detected.codex) {
       writeAgentsMd();
@@ -1310,11 +1336,11 @@ async function registerAgentFlow(apiKey, ownerId) {
     ensureMcpServer();
   } else if (shouldSetup === false) {
     console.log("");
-    console.log(chalk6.dim("  To configure agent frameworks manually:"));
-    console.log(chalk6.dim("  https://docs.agentvalet.ai/setup"));
+    console.log(chalk7.dim("  To configure agent frameworks manually:"));
+    console.log(chalk7.dim("  https://docs.agentvalet.ai/setup"));
   }
   console.log("");
-  console.log(chalk6.bold.green("  \u2713 All done!"));
+  console.log(chalk7.bold.green("  \u2713 All done!"));
   console.log("");
   console.log("  Set these in your environment:");
   console.log("");
@@ -1325,35 +1351,241 @@ async function registerAgentFlow(apiKey, ownerId) {
     AGENT_PRIVATE_KEY_PATH: path6.join(process.cwd(), ".agentvalet", "agent.key")
   }));
   console.log("");
-  console.log(chalk6.dim("  Private key also saved to: .agentvalet/agent.key"));
-  console.log(chalk6.dim("  Add .agentvalet/ to your .gitignore"));
+  console.log(chalk7.dim("  Private key also saved to: .agentvalet/agent.key"));
+  console.log(chalk7.dim("  Add .agentvalet/ to your .gitignore"));
   console.log("");
   console.log(
-    `  Dashboard: ${chalk6.cyan.underline("https://app.agentvalet.ai")}`
+    `  Dashboard: ${chalk7.cyan.underline("https://app.agentvalet.ai")}`
   );
-  console.log(chalk6.dim("  Approve this agent in your dashboard to activate it."));
+  console.log(chalk7.dim("  Approve this agent in your dashboard to activate it."));
   console.log("");
   console.log("  Useful commands:");
-  console.log(chalk6.dim("    npx @agentvalet/register          \u2014 register another agent"));
-  console.log(chalk6.dim("    npx @agentvalet/register refresh  \u2014 refresh approved permissions"));
+  console.log(chalk7.dim("    npx @agentvalet/register          \u2014 register another agent"));
+  console.log(chalk7.dim("    npx @agentvalet/register refresh  \u2014 refresh approved permissions"));
   console.log("");
 }
 function showCredentials(config) {
   console.log("");
   console.log("  Your AgentValet credentials:");
   console.log("");
-  console.log(`  Owner ID:  ${chalk6.bold(config.ownerId)}`);
-  console.log(`  Proxy URL: ${chalk6.bold(config.proxyUrl)}`);
-  console.log(`  Email:     ${chalk6.bold(config.email)}`);
+  console.log(`  Owner ID:  ${chalk7.bold(config.ownerId)}`);
+  console.log(`  Proxy URL: ${chalk7.bold(config.proxyUrl)}`);
+  console.log(`  Email:     ${chalk7.bold(config.email)}`);
   console.log("");
 }
 
+// src/commands/list.ts
+import { Command } from "commander";
+import chalk8 from "chalk";
+
+// src/lib/config.ts
+import { homedir } from "os";
+import { join as join2 } from "path";
+import { readFile as readFile3, writeFile as writeFile6, mkdir as mkdir4 } from "fs/promises";
+var CONFIG_PATH = join2(homedir(), ".agentvalet", "config.json");
+var DEFAULTS = {
+  apiUrl: "https://app.agentvalet.ai",
+  token: null
+};
+async function loadConfig() {
+  try {
+    const raw = await readFile3(CONFIG_PATH, "utf-8");
+    return { ...DEFAULTS, ...JSON.parse(raw) };
+  } catch (err) {
+    if (err.code === "ENOENT") return { ...DEFAULTS };
+    throw err;
+  }
+}
+
+// src/lib/api.ts
+async function request(path7, options) {
+  const config = await loadConfig();
+  if (!config.token) throw new Error("Not authenticated. Run: agentvalet login");
+  const response = await fetch(`${config.apiUrl}/functions/v1${path7}`, {
+    method: options.method,
+    headers: {
+      "Authorization": `Bearer ${config.token}`,
+      "Content-Type": "application/json"
+    },
+    body: options.body ? JSON.stringify(options.body) : void 0
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`API error ${response.status}: ${text}`);
+  }
+  return response.json();
+}
+async function revokeAgent(agentId) {
+  return request("/revoke-agent", { method: "POST", body: { agentId } });
+}
+async function listAgents() {
+  return request("/list-agents", { method: "GET" });
+}
+
+// src/commands/list.ts
+function listCommand() {
+  return new Command("list").description("List all registered agents").action(async () => {
+    const config = getStoredConfig();
+    if (!config.ownerId) {
+      process.stderr.write(
+        chalk8.red("\n  \u2717 No agent registered.\n") + chalk8.dim("  Run the following command first:\n\n    npx @agentvalet/register\n\n")
+      );
+      process.exit(1);
+    }
+    try {
+      const agents = await listAgents();
+      if (agents.length === 0) {
+        console.log("No agents registered yet. Run: npx @agentvalet/register");
+        return;
+      }
+      const maxNameLen = Math.max(...agents.map((a) => a.name.length), 4);
+      const header = `${"ID".padEnd(30)}  ${"NAME".padEnd(maxNameLen)}  STATUS`;
+      console.log(header);
+      console.log("-".repeat(header.length));
+      for (const agent of agents) {
+        const status = agent.status === "active" ? chalk8.green("\u2713 active") : agent.status === "suspended" ? chalk8.yellow("\u26A0 suspended") : chalk8.red("\u2717 revoked");
+        console.log(`${agent.id.padEnd(30)}  ${agent.name.padEnd(maxNameLen)}  ${status}`);
+      }
+    } catch (err) {
+      console.error(chalk8.red(String(err)));
+      process.exit(1);
+    }
+  });
+}
+
+// src/commands/revoke.ts
+import { Command as Command2 } from "commander";
+import chalk9 from "chalk";
+import * as readline from "readline";
+function revokeCommand() {
+  return new Command2("revoke").description("Revoke an agent (cascades to all child agents)").requiredOption("--agent-id <agentId>", "Agent ID to revoke (agt_...)").action(async (opts) => {
+    const config = getStoredConfig();
+    if (!config.ownerId) {
+      process.stderr.write(
+        chalk9.red("\n  \u2717 No agent registered.\n") + chalk9.dim("  Run the following command first:\n\n    npx @agentvalet/register\n\n")
+      );
+      process.exit(1);
+    }
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const confirmed = await new Promise((resolve4) => {
+      rl.question(
+        chalk9.yellow(`Revoke ${opts.agentId}? This cascades to all child agents and cannot be undone. (y/N) `),
+        (ans) => {
+          rl.close();
+          resolve4(ans.trim().toLowerCase() === "y");
+        }
+      );
+    });
+    if (!confirmed) {
+      console.log("Cancelled.");
+      return;
+    }
+    try {
+      const result = await revokeAgent(opts.agentId);
+      console.log(chalk9.green(`Revoked ${result.revokedAgentIds.length} agent(s)`));
+      if (result.revokedAgentIds.length > 1) {
+        console.log("Revoked:", result.revokedAgentIds.join(", "));
+      }
+    } catch (err) {
+      console.error(chalk9.red(String(err)));
+      process.exit(1);
+    }
+  });
+}
+
+// src/commands/inject.ts
+import { Command as Command3 } from "commander";
+import chalk10 from "chalk";
+import { readFile as readFile6 } from "fs/promises";
+
+// src/lib/claude-config.ts
+import { homedir as homedir2 } from "os";
+import { join as join3 } from "path";
+import { readFile as readFile4, writeFile as writeFile7, mkdir as mkdir5, access } from "fs/promises";
+var CLAUDE_CONFIG_PATH = join3(homedir2(), ".claude", "config");
+async function writeKeyToClaudeConfig(agentId, privateKeyPem) {
+  let config = {};
+  try {
+    await access(CLAUDE_CONFIG_PATH);
+    const raw = await readFile4(CLAUDE_CONFIG_PATH, "utf-8");
+    config = JSON.parse(raw);
+  } catch {
+  }
+  config.agent_keys = config.agent_keys ?? {};
+  config.agent_keys[agentId] = Buffer.from(privateKeyPem).toString("base64");
+  await mkdir5(join3(homedir2(), ".claude"), { recursive: true });
+  await writeFile7(CLAUDE_CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
+}
+
+// src/lib/env-writer.ts
+import { readFile as readFile5, writeFile as writeFile8, access as access2 } from "fs/promises";
+var ENV_VAR_NAME = (agentId) => `AGENTVALET_PRIVATE_KEY_${agentId.replace(/-/g, "_").toUpperCase()}`;
+async function writeKeyToEnvLocal(agentId, privateKeyPem) {
+  const varName = ENV_VAR_NAME(agentId);
+  const b64Key = Buffer.from(privateKeyPem).toString("base64");
+  const line = `
+# AgentValet private key for ${agentId} (base64-encoded PEM)
+${varName}=${b64Key}
+`;
+  let existing = "";
+  try {
+    await access2(".env.local");
+    existing = await readFile5(".env.local", "utf-8");
+  } catch {
+  }
+  if (existing.includes(varName)) {
+    const lines = existing.split("\n");
+    const filtered = lines.filter((l) => !l.startsWith(`${varName}=`));
+    await writeFile8(".env.local", filtered.join("\n") + line, "utf-8");
+  } else {
+    await writeFile8(".env.local", existing + line, "utf-8");
+  }
+}
+
+// src/commands/inject.ts
+function injectCommand() {
+  return new Command3("inject").description("Inject agent private key into Claude Code config or .env.local").requiredOption("--agent-id <agentId>", "Agent ID (agt_...)").requiredOption("--key-file <path>", "Path to the private key PEM file").option("--target <target>", "Injection target: claude-code or env-local", "claude-code").action(async (opts) => {
+    let privateKeyPem;
+    try {
+      privateKeyPem = await readFile6(opts.keyFile, "utf-8");
+    } catch {
+      console.error(chalk10.red(`Could not read key file: ${opts.keyFile}`));
+      process.exit(1);
+    }
+    if (!privateKeyPem.includes("BEGIN PRIVATE KEY")) {
+      console.error(chalk10.red("File does not appear to be a PEM private key"));
+      process.exit(1);
+    }
+    try {
+      if (opts.target === "claude-code") {
+        await writeKeyToClaudeConfig(opts.agentId, privateKeyPem);
+        console.log(chalk10.green("Key injected into ~/.claude/config"));
+      } else if (opts.target === "env-local") {
+        await writeKeyToEnvLocal(opts.agentId, privateKeyPem);
+        console.log(chalk10.green("Key appended to .env.local"));
+      } else {
+        console.error(chalk10.red(`Unknown target: ${opts.target}. Use 'claude-code' or 'env-local'`));
+        process.exit(1);
+      }
+    } catch (err) {
+      console.error(chalk10.red(String(err)));
+      process.exit(1);
+    }
+    if (opts.target === "env-local") {
+      console.log(chalk10.dim("Add .env.local to .gitignore \u2014 do not commit private keys to git."));
+    } else {
+      console.log(chalk10.dim("The key is stored in ~/.claude/config \u2014 it is NOT committed to git."));
+    }
+    console.log(chalk10.green("Done. Your agent is ready to use."));
+  });
+}
+
 // src/index.ts
 function collectScope(value, previous) {
   return [...previous, value];
 }
-var program = new Command();
-program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.4").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
+var program = new Command4();
+program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.6").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
   let agentName = opts.name ?? "";
@@ -1379,7 +1611,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
       console.error(JSON.stringify({ error: "--owner or AGENTVALET_OWNER is required" }));
       process.exit(3);
     }
-    console.error(chalk7.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
+    console.error(chalk11.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
     process.exit(3);
   }
   const scopeMap = /* @__PURE__ */ new Map();
@@ -1387,7 +1619,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     const colon = s.indexOf(":");
     if (colon === -1) {
       console.error(
-        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk7.red(`Invalid scope format: ${s} (expected platform:scope)`)
+        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk11.red(`Invalid scope format: ${s} (expected platform:scope)`)
       );
       process.exit(3);
     }
@@ -1410,11 +1642,11 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Registration failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Registration failed: ${msg}`));
     process.exit(3);
   }
   if (!isJson) {
-    console.log(chalk7.cyan(`
+    console.log(chalk11.cyan(`
 Approve at: https://app.agentvalet.ai/agents
 `));
   }
@@ -1422,7 +1654,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "pending", token }));
     } else {
-      console.log(chalk7.yellow("Registration submitted (--no-wait). Token:"), token);
+      console.log(chalk11.yellow("Registration submitted (--no-wait). Token:"), token);
     }
     process.exit(0);
   }
@@ -1433,14 +1665,14 @@ Approve at: https://app.agentvalet.ai/agents
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Wait failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Wait failed: ${msg}`));
     process.exit(3);
   }
   if (result.status === "rejected") {
     if (isJson) {
       console.log(JSON.stringify({ status: "rejected" }));
     } else {
-      console.log(chalk7.red("\nRegistration denied by owner."));
+      console.log(chalk11.red("\nRegistration denied by owner."));
     }
     process.exit(1);
   }
@@ -1448,7 +1680,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "timeout" }));
     } else {
-      console.log(chalk7.yellow("\nTimed out waiting for approval."));
+      console.log(chalk11.yellow("\nTimed out waiting for approval."));
     }
     process.exit(2);
   }
@@ -1467,7 +1699,7 @@ Approve at: https://app.agentvalet.ai/agents
     }));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Failed to save output: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Failed to save output: ${msg}`));
     process.exit(3);
   }
   const keyWritten = !!privateKey;
@@ -1477,23 +1709,23 @@ Approve at: https://app.agentvalet.ai/agents
   if (isJson) {
     console.log(JSON.stringify({ status: "approved", agentId, keyPath: keyWritten ? keyPath : null, envPath }));
   } else {
-    console.log(chalk7.green(`
+    console.log(chalk11.green(`
 Approved! Agent ID: ${agentId}`));
     if (keyWritten) {
-      console.log(chalk7.gray(`Key:        ${keyPath}`));
+      console.log(chalk11.gray(`Key:        ${keyPath}`));
     } else {
-      console.log(chalk7.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
+      console.log(chalk11.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
     }
-    console.log(chalk7.gray(`Env file:   ${envPath}`));
+    console.log(chalk11.gray(`Env file:   ${envPath}`));
     console.log(`
 Source the env file before calling any tool:`);
-    console.log(chalk7.cyan(`  source ${envPath}`));
+    console.log(chalk11.cyan(`  source ${envPath}`));
   }
   if (keyWritten) {
     try {
       if (grantedPlatforms && grantedPlatforms.length > 0) {
         writePermissionsFromEvent(agentId, resolvedOwnerId, grantedPlatforms);
-        if (!isJson) console.log(chalk7.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk11.gray(`Permissions: .claude/agentvalet-permissions.md`));
       } else {
         await runRefresh({
           envFile: opts.output,
@@ -1501,10 +1733,10 @@ Source the env file before calling any tool:`);
           ifStale: false,
           quiet: isJson
         });
-        if (!isJson) console.log(chalk7.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk11.gray(`Permissions: .claude/agentvalet-permissions.md`));
       }
     } catch {
-      if (!isJson) console.log(chalk7.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      if (!isJson) console.log(chalk11.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
     }
   }
   process.exit(0);
@@ -1519,13 +1751,16 @@ program.command("refresh").description("Refresh approved permissions and update
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk7.red(`Refresh failed: ${msg}`));
+    console.error(chalk11.red(`Refresh failed: ${msg}`));
     process.exit(3);
   }
 });
 program.command("mcp-server").description("Start the AgentValet MCP server (stdio transport)").action(async () => {
   await import("./mcp-server-SBGWYBP7.js");
 });
+program.addCommand(listCommand());
+program.addCommand(revokeCommand());
+program.addCommand(injectCommand());
 program.parseAsync().catch((err) => {
   console.error(err);
   process.exit(3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {